Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it seems like it is a great way to do so much”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5a7067d617f6313b73140e441560e2ac4997282f1b1b8a6a0ca30a6084874113
Signature (Ed25519, base64)
Xq/pSV3anD6jLjJiuI6BN0TCVGIPlHNL3MLV79/nHMAFX09YT+Zu+TYRTje++4blsXqnF/IOjOmgml7Dxzd6Dw==
Merkle root
6ddadcc7cc1bb0679f63a30d8a28a2a72e039950945f2d7276487dd5b703ff7b
Merkle path
["5a6ef6660689b3dfebabf289445c93070aae5d71112656762296d2bb9dd56730","ea766935e7c17478ff894f0a718547084402977d746857325e711c5510faf7d1","77b5b215bc7f58810c77485bb4f2f67cd5bdb3211660130b43242ab5fc9dcde6","a7f5667fc7562dd42303b8b26cca7fbb361766d0ebbc10c0c562dc0b24e66ab4","af860797f2d7578433a698b6fa7cd3c6a29cda38dd645efe905bf0ed2824b2b3","57162f93c67c63ef3a0a8416a185f6ab00f4082fd726c3eaf11aafa2e37fcb61","af3124ca69905ba1128017b0746b613c3e79bc0a25f71531dbd540d5d5ae3db3","858c1aea41ffe952f9ee82c06aae8e7325763d0abf6311413d1a75fdff9268cc","2b344a451e051dd1f5112d23ec68b2533baf543059cb082587909a5f9ae6e7d8","c04be79717e8295f03065225830317ad0e8c76272f354a9f5c5c3c9f4024788c","257e982e50b480e9b4b78b80b84c608d1f59ed78c983f5ff7ccc48e49a690d4d","5afd3eff3d9dffa0c79dc23a4617d0dcf00dae245b8efbf5b3fa4a682ffba7d1","60c827bc9e50a95b1e0b7e32530c3daf7f7a2362b5d4a48ed1e0b71eca730231","9e168dca44eb94549433cdf178f0f0b1ef27534c6f92f24d9664ece03a3c710e","052ac7d24dfc9659210f2718e5c7e6b2477f3dc364546bd6ed2bd5df9d14d7b0"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514541190 · entry 108e9186e8c5677acb65…
Expected log hash
adca5adcd6d3235cf084bc9b408d3e4d7742d07347957346ff2629f37429bf20 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787130614827","kind":"published-quote","locale":"en","page":"theme:acrobat/quality/en","quote":"it seems like it is a great way to do so much","rating":5,"review_date":"2026-08-12","source":"Apple App Store","source_url":"https://apps.apple.com/au/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ddadcc7cc1b…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.